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Abstract — Information theoretic secrecy is combined with cryp- 
tographic secrecy to create a secret-key exchange protocol for 
wireless networks. A network of transmitters, which already have 
cryptographically secured channels between them, cooperate to 
exchange a secret key with a new receiver at a random location, 
in the presence of passive eavesdroppers at unknown locations. 
Two spatial point processes: homogeneous Poisson process and 
independent uniformly distributed points are used for the spatial 
distributions of transmitters and eavesdroppers. We analyse 
the impact of the number of cooperating transmitters and the 
number of eavesdroppers on the area fraction where secure 
communication is possible. Upper bounds on the probability of 
existence of positive secrecy between the cooperating transmitters 
and the receiver are derived. The closeness of the upper bounds 
to the real value is then estimated by means of numerical 
simulations. Simulations also indicate that a deterministic spatial 
distribution for the transmitters e.g. hexagonal and square 
lattices, increases the probability of existence of positive secrecy 
capacity compared to the random spatial distributions. For the 
same number of friendly nodes, cooperative transmitting provides 
a dramatically larger secrecy region than cooperative jamming 
and cooperative relaying. 

I. Introduction 

Information theoretic secrecy has attracted a significant 
interest in recent years due to its possible applications in 
wireless communications, and the growing significance of 
wireless networks. Wyner __ first introduced the concept of 
wiretap channel in 1975. For discrete memory less channels, he 
has determined that a message can be transmitted reliably from 
a transmitter to a receiver without revealing any information on 
the message to the eavesdropper provided that the transmitter 
operates at rates smaller than the secrecy capacity. If the main 
channel and the wiretap channel are additive white Gaussian 
noise channels, then the secrecy capacity is equal to the 
difference of the capacities of the two channels as shown by 
Leung- Yan-Cheong and Hellman in __. Csiszar and Korner 
_0 extended the previous results to the case of a broadcast 
channel with confidential messages. 

Secrecy capacity can be improved using cooperation with 
friendly nodes. In the cooperative jamming __, friendly nodes, 
which are close to the eavesdropper, jam the eavesdropper to 
help increase the achievable secrecy rates for the transmitter by 
decreasing the signal-to-noise (SNR) ratio at the eavesdropper. 
In the cooperative relaying _>], _>], friendly nodes which are 
closer to the receiver than to the eavesdropper are used as 



relays. The relays increase SNR more at the receiver than at 
the eavesdroppers. 

Information theory achieves perfect secrecy as opposed 
to the computational secrecy provided by cryptographic al- 
gorithms. Here we examine the possibility for mutual ap- 
plications of cryptographic secrecy and information-theoretic 
secrecy. A set of transmitters (e.g. base stations) have al- 
ready cryptographically secured the communication channels 
between them. When a transmitter wants to communicate 
securely with a new receiver (e.g. a mobile station), a pre- 
secret key message is created by the transmitter, broken into 
several data blocks, and a separate block is encrypted and 
sent to each of the other transmitters. Then each transmitter 
sends its data block to the receiver. The transmitters ensure 
that all the data blocks are received correctly at the receiving 
node, which is required for the computation of the secret 
key at the receiver. The secret key is securely and cooper- 
atively transmitted to the receiver (without being divulged 
to the eavesdroppers) if the secrecy capacity is positive for 
the communication channel between at least one transmitter 
and the receiver. As the number of transmitters grows, the 
eavesdroppers are facing a more difficult task of being able to 
intercept a larger number of transmitters. Once the secret key 
is exchanged, the legitimate parties can start communicating at 
the maximum data rate since their communication channel is 
cryptographically protected achieving computational secrecy 
Q. 

Here is the overview of this paper. In Section __ we present 
the system model. In Section__]we address the main research 
questions of this paper: (i) evaluation of the impact of the 
spatial distribution of transmitters and eavesdroppers on the 
secrecy region fraction, and derivation of upper bounds for 
this fraction; and (ii) comparison with cooperative relaying 
and cooperative jamming. Section [TV] concludes the paper. 

II. Network model 

We consider two-dimensional wireless networks with the 
following communication nodes: A network of Lt cooperating 
transmitters, a single receiver, and a network of Le passive 
eavesdroppers. The passive eavesdroppers do not transmit any 
signal, and try to intercept the information that is transmitted 
between the pairs of legitimate nodes, hence reducing the 
secrecy capability of the network. Their locations are unknown 



to the transmitters. Each transmitter is equipped with only a 
single omni-directional antenna. 

In the sequel, we use the following notation: 

L(A) The area of a region A e R 2 ; 

Lt A random variable which denotes the number of 

transmitters in a region A; 
Le A random variable which denotes the number of 

eavesdroppers in a region A; 
b\\c A concatenation of two data blocks b and c; 
V, V e The additive noise at receiver and eavesdropper, 

which are independent zero mean Gaussian random 

variables with variance a 2 ; 
Ct, r Capacity of the communication channel between 

transmitter t and receiver r; 
Cg-t.r Secrecy capacity between transmitter t and receiver 

r; 

C s Secrecy capacity between a set of cooperating trans- 
mitters and a receiver; 
dj i The distance between nodes i and j. 
We use the additive white Gaussian noise model. Then, the 
received signal at the receiver r from the transmitter t is 
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where X is the transmitted signal from the transmitter t, and 
j3 is the path-loss coefficient (B). The received signal at the 
eavesdropper e from the transmitter t equals 

z e = d;^ /2 x + v e . 

The point to point capacities between transmitter t and 
receiver r, and between transmitter t and eavesdropper e are 
given by 



C t,r = lo S2 1 



1 / Ptd t 
C t , e = -log 2 l + 
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where P t is the transmitter's power. If the point to point 
capacity between the transmitter and the eavesdropper Ct je 
is larger than the capacity of the channel between the two 
communicating nodes Ct. r , then C s -t. r = 0. Otherwise, 
C s:t , r > G): 

C S :t, r = max{CV r - C tl e,0} 

From Eq. (Q~|i it follows that C s -t. r > if the receiver r is 
closer to the transmitter than the eavesdropper, that is, dt, r < 
dt, e - The disk D s C R 2 with center at the transmitter and 
radius equal to the distance between the transmitter and the 
nearest eavesdropper is called secrecy disk of the transmitter. If 
a receiver is inside the secrecy disk, then the secrecy capacity 
between the transmitter and the receiver is positive. 

Receivers which are outside the secrecy disk for a given 
transmitter can not communicate securely with that transmitter. 
In the next section we explain a type of cooperation for a set of 
friendly transmitter that combines their secrecy disks and thus 



allows them to communicate secretly with receivers positioned 
in a larger region. 

III. Cooperative transmitting 

The set of transmitters have already established a cryp- 
tographic secret key, and they can cryptographically protect 
their mutual communication channels. Let assume that trans- 
mitter U and a new communicating node/receiver r want 
to communicate. U generates a pre-secret key message B 
with arbitrary length, which it then divides into Lt blocks 
b\, &2, • ■ • j &L r - Each block is sent to a a different transmitter 
via a cryptographically secured channel. Then each transmitter 
ti sends its block bi to the receiver. The intended receiver 
correctly receives all blocks bi, 62, • • • , bL T , and restores the 
pre-secret key message B = &1II62II • ■ • \ \1>l t - Both ti and r 
use a cryptographic hash function H to calculate the mutual 
secret key K = H(B), which is then used to cryptographically 
protect their mutual communication. The eavesdroppers have 
to be able to intercept the transmission from all Lt transmit- 
ters. If at least one data block out of Lt data blocks is not 
intercepted, then the secret key K can not be computed at the 
eavesdropper. We call this strategy for cooperation - coopera- 
tive transmitting. Using cooperative transmitting a transmitter 
can exchange a secret key with a receiver if the receiver is 
inside any of the secrecy disks for all Lt transmitters. The 
impact of cooperative transmitting is quantitatively measured 
through the fraction F s (A) of a region A covered by the union 
of secrecy disks. In other words, fraction F S (A) is equal to the 
probability of securely exchanging a secret-key with a receiver 
that is randomly positioned inside the region A 

F S (A) = P{C S > 0} 

. The coverage problem by secrecy disks was studied by Sarkar 
and Haenggi Q- They studied the covered volume fraction and 
the asymptotic conditions for complete coverage in one and 
two dimensions. 

Figure Q] illustrates the concept of cooperative transmitting 
on a sample network. Receiver r is inside the secrecy disk of 
transmitter £4, and therefore block 64 can not be intercepted 
by any of the eavesdroppers. 
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Fig. 1. Sample network with four transmitters, one new receiver, and three 
eavesdroppers. 



In the remainder of this paper, we analyse the dependence 
of P{C S > 0} on the spatial distributions of transmitters 
and eavesdroppers. We analyse both random and deterministic 
models for the spatial distribution of transmitters and eaves- 
droppers. Two simple models for random spatial processes 
for the transmitters and the eavesdroppers will be used. The 
first model is homogeneous Poisson process on the plane 
characterised by the mean number of points A in a unit area, 
called also rate or density of the Poisson Process. The number 
of points I inside a region A follows the Poisson probability 
distribution law with parameter XL(A) 



Pl(1) 



(XL(A)Y XL(A) 

n 



(2) 



In the second model a fixed number of points are indepen- 
dently and uniformly distributed (IUD) in a certain region of 
the plane, characterised by s single parameter - the fixed num- 
ber of points. These models are widely used in the literature on 
information theoretic secrecy ||9], IflOl . IfTTI . the reason being 
twofold. They provide a good first-order approximation for the 
spatial distribution of communication nodes in real networks. 
Second, simplicity of the homogeneous Poisson process and 
IUD process allows for an analytical analysis of information 
security -related metrics e.g. fraction F S (A). For the spatial 
distribution of the transmitters we will also investigate two 
deterministic models: hexagonal lattice and square lattice. 

A. IUD transmitters and IUD eavesdroppers 

In the first case, the position of the transmitters in a region 
A e R 2 obeys a IUD process with parameter tit- Similarly, a 
fixed number of eavesdroppers n e are positioned according to 
an IUD process in the same region A. If tit = 1, then C s > 
if the receiver is inside the secrecy disk of the transmitter, 
that is, it is closer to the transmitter than any of the tie 
eavesdroppers: 



P{C S > 0} = 
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(3) 



For tit > 1, we establish an upper bound for P{C S > 0} as 
follows. For tit = 2, the secrecy region of the two transmitters 
is union of their secrecy disks: 

P{C S > 0} = 1 - P{C S < 0} < 



1 - P{C s:1 , r < 0}P{C s:2 , r < 0} < 1 - 



II £ 



l + n E 



where the overlapping area of the two secrecy disks is ne- 
glected in the upper bound. One can generalise for tit > 1 
thus obtaining 



P{C S > 0} < 1 - 



n E 



1 + n E 



(4) 



Next we consider the case when both tit and tie grow 
infinitely, while their ratio remains constant k = — . This is 
a good first order approximation when the area of region A 



grows infinitely and the densities of transmitters and eaves- 
droppers remain constant. Then 



lim P{C S > 0} < lim 1 - 



1 + n E 
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= 1 - e 
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(5) 

In order to evaluate the closeness of the upper bounds (|4) 
and <j3j to the real value, we have numerically estimated the 
value for P{C S > 0}. Figure [2] depicts the dependence of 
P{C S > 0} on riT and tie as obtained from the numerical 
simulations. Each point on the curves is obtained from 100,000 
network simulations. 




Fig. 2. Dependence of P{C' S > 0} on the number of transmitters nj with 
as the curves' parameter. The lowest curve corresponds to nj; = 10, and 
the highest curve is for iij = 1. 

Figure[3]shows the closeness between upper bound given by 
Eq. and the real values for P{C S > 0}, which are estimated 
through numerical simulations. Relative gap between the upper 
bound and the real values grows for larger tit due to the 
increasing number of overlapping secrecy disks. 




Fig. 3. Closeness between the real value for P{C S > 0} (circles) and the 
upper bound (squares) given by Eq. @J. 

Figure [4] shows the closeness between the upper bounds (|4) 
and (0, and the numerically estimated values for P{C S > 0}. 
Relative gap between the upper bounds and the real values 
gets smaller for smaller k (larger tie) since the secrecy disks 
as well as their overlaps become smaller in size. 



Fig. 4. Closeness between the real value for P{C S > 0} (circles), and the 
upper bounds given by Eqs. @ (squares) and l|5] (triangles), nx = 10 and 
n E = 1,2,..., 10. 



Fig. 5. Closeness between the real value for P{C S > 0}, and the upper 
bound given by Eq. {6}. 



B. Poisson transmitters and IUD eavesdroppers 

Next we consider the case where transmitters are positioned 
according to a Poisson spatial process with rate At- Without 
lose of generality of the results, we assume that L(A) = 1 
and thus the average number of transmitters in the region A 
is XL(A) = A. Eavesdroppers' positions obey an IUD process 
and the number of eavesdroppers in the region A is n E . 

If the number of transmitters Lt is 1, then Eq. (0 holds. 
For Lt > 1, the upper bound given by Eq. (0|i is valid. Then 
an upper bound for P{C S > 0} can be derived as an average 
value of functions ([3]i and <j4j for the random variable Lt'- 



P{C s >0} = E[P{C a >0\L T }] 
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Figure [5] shows the closeness between the upper bound 
©, and the numerically calculated values for P{C S > 0}. 
Similar to Fig. [3] accuracy of the upper bound decreases 
for larger At as a consequence of the increasing number of 
intersecting secrecy disks. Numerical simulation of a Poisson 
spatial process was done according to |[T2l . In order to generate 
a Poisson process with rate A in a region A, we first randomly 
select a value I for a Poisson variable with mean XL(A), 
and then we randomly position I IUD points in A. Observed 
dependence of P{C S > 0} on At and n E was similar to the 
one depicted in Fig [2] 

C. IUD transmitters and Poisson eavesdroppers 

A fixed number of transmitters ut are positioned at IUD 
points in a region A € R 2 . Positions of eavesdroppers follow 
a Poisson spatial process with average rate A#. For sake of 
simplicity we again assume that 1(A) = 1 Then the number 
of eavesdroppers in A is a Poisson random variable L E with 
average value A#. Its probability distribution function is given 
by Eq. (0 where A = A#. For tit = 1, the secrecy region 



fraction is given by 
P{C S > 0} = E 



1 



= T-(l-e" 



For riT > 1 we ran numerical simulations, and the results 
are given in Fig. [6] Note the similarity with Fig. [2] 




Fig. 6. Dependence of P{C B > 0} on the number of transmitters nj with 
\e as the curves' parameter. The lowest curve corresponds to \e = 10, and 
the highest curve is for = 1. 

For sake of completeness, we have also numerically anal- 
ysed the case when a homogeneous Poisson process in a 
region A € R 2 is assumed for both transmitters and eaves- 
droppers. Again we have obtained very similar results to the 
previously analysed three combinations of IUD and Poisson 
spatial processes for transmitters and eavesdroppers. Following 
slight differences were observed. IUD spatial process for the 
transmitters gives slightly higher values for P{C S > 0} than 
the Poisson spatial processes. On the contrary, the Poisson 
spatial process for the eavesdroppers gives slightly higher 
values for P{C S > 0} than the IUD spatial processes. 

D. Transmitters in deterministic lattice and UID eavesdrop- 
pers 

Next we analysed the case when the transmitters are po- 
sitioned on a deterministic lattice, and the eavesdroppers 



obey a UID process. By means of numerical simulations we 
examined a square lattice and a hexagonal lattice. We observed 
similar shapes to the curves shown in Fig. [2] and Fig. [6] for 
stochastic spatial processes for the transmitters. P{C S > 0} 
is higher for a deterministic lattice compared to a stochastic 
spatial processes for the transmitters (see Fig. |7} due to the 
lower variations in the overlap between the secrecy disks 
of individual transmitters. For a stochastic spatial process, 
there are areas which can be covered by multiple overlapping 
secrecy disks of nearby transmitters. At the same time in the 
regions with sparse transmitters, it is more probable to find 
subregions not covered by any secrecy disk. 
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Fig. 7. Comparison of stochastic and deterministic positioning of eavesdrop- 
pers. Top two curves are for hexagonal and square lattice (IUD eavesdroppers 
with tij = 5), while middle four curves are for Poisson and IUD spatial 
processes for the transmitters' and eavesdroppers' positions (with Xe = 5 or 
n e = 5). Bottom three curves are for cooperative jamming and cooperative 
relaying. 

E. Comparison with cooperative jamming and cooperative 
relaying 

In this section we compare cooperative transmitting with 
two other strategies for cooperation in wireless networks. 
Cooperative relaying and cooperative jamming increase the 
secrecy capacity by means of widening the gap between the 
SNR at the legitimate receiver and the SNR at the eaves- 
droppers. In the single hop cooperation with the best relay 
US, lfl4l only the strongest relay is selected from the set 
of UID randomly positioned relays, which is the relay node 
which most improves the secrecy capacity. In the "single hop 
cooperation with the best jammer" fPJl . Ifl4l a single node 
from the set of friendly nodes is selected to act as a jammer. 
Cooperative jamming aims to reduce the SNR at the legitimate 
receiver, but at the same time it reduces the SNR even more at 
the eavesdroppers. On the contrary, the best relay increases the 



secrecy capacity by increasing SNR at the legitimate receiver 
more than it increases SNR at the eavesdroppers. 

We use the value for P{C S > 0} as a quantitative 
measure of the positive impact of the different strategies 
for cooperation. Figure |7] shows that cooperative transmitting 
offers dramatic improvement in the secrecy region's size over 
cooperative jamming and cooperative relaying. 

IV. Conclusion 

In this work we propose to combine information theoretic 
secrecy with cryptographic secrecy to increase the secrecy 
region, and provide a novel solution to the key-exchange 
problem. Cooperative transmitting can significantly improve 
information-theoretic secrecy in wireless networks. The type 
of cooperation is quite important for the resulting secrecy 
region. For the same number of friendly nodes, cooperative 
transmitting provides a larger coverage area than cooperative 
jamming and cooperative relaying. 
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